Cybercriminals continue to abuse unprotected Docker API to create new containers used for cryptojacking, Trend Micro warns. Sysdig and Aqua Security researchers started observing cyber attacks targeting Kubernets and Docker instances aimed at mining Monero cryptocurrency. Experts pointed out that a Docker Engine is not properly secured could be exposed to remote attack through Docker Engine API. Experts provided recommendations to secure Docker Engine installs, below best practices provided by Trend Micro. The Center for Internet Security has a reference that can help system administrators and security teams establish a benchmark to secure their Docker engine.”]
Source: https://securityaffairs.co/wordpress/77460/hacking/docker-apis-abuses-cryptojacking.html